691
RCE on Telia Routers
Multiple vulnerabilities could allow running arbitrary code on an intranet server and gain root access on all the customers' routers
Top posts
Every blog post that took off on Hacker News, ranked by the votes of its best submission. 1,406 posts.
692
Is there hope for IPv6?
Last year Georgia Tech’s Internet Governance Project teamed up with ICANN’s Office of the Chief Technology Officer to research the economic factors affecting the decisions of network operators to deploy Internet Protocol version 6 (IPv6). The study was commissioned because we both believe that the Internet community…
693
Matrix.org Will Migrate to MAS
Matrix, the open protocol for secure decentralised communications
694
Systems Monitoring with Prometheus and Grafana
The evolution of systems monitoring technology decisions and practices for multi-machine Hyperfeed and predictive technology.
695
Mastodon 2.5 released
Mastodon 2.5 is the 100th released version of Mastodon since the project’s inception almost 2 years ago. It brings a variety of improvements to the software, the full list of which is available in the changelog. Public profile page The public areas of the web interface have been redesigned. The color scheme and design…
696
Lightning on Stellar: Technical Spec and Roadmap
The technical specification and timeline for Lightning on Stellar, including working examples and an explanation of the new BUMP_SEQUENCE operation.
697
Announcing Envoy: C++ L7 proxy and communication bus
Today we are incredibly excited to open source Envoy, our high performance C++ distributed proxy and communication bus designed for large…
698
Google Public DNS turns 8.8.8.8 years old
Posted by Alexander Dupuy, Software Engineer Once upon a time, we launched Google Public DNS , which you might know by its iconic IP addre...
699
Targeted attack on our management with the Triangulation Trojan
So you’ve heard of blockchain. But how can you use it in your enterprise today? Vitaly Mzokov explores the benefits and security challenges.
700
A Technology Preview of Nginx Support for QUIC and HTTP/3
We announce the technology preview of NGINX support for QUIC+HTTP/3 as pre-release software, available for interoperability testing, feedback, and code contributions. HTTP/3 replaces TCP with QUIC, which is designed to support multiplexed connections more reliably.
701
Tor security advisory: “relay early” traffic confirmation attack
This advisory was posted on the tor-announce mailing list. SUMMARY: On July 4 2014 we found a...
702
AdGuard DNS: A Privacy-Oriented DNS Server
AdGuard DNS: a privacy-oriented DNS service that blocks trackers and ads anywhere, from your PC and mobile devices to smart TV and IoT.
703
BGP leaks and cryptocurrencies
Over the few last hours, a dozen news stories have broken about how an attacker attempted (and perhaps managed) to steal cryptocurrencies using a BGP leak.
704
It is unlikely that built-in email encryption will ever be available in Gmail
Gmail's end-to-end encryption project seemed dead in 2017. Now it's back, but only for key account customers.
705
Brave Talk: Unlimited, private video calls, in browser
Brave Talk brings unlimited, private video calls, right to your browser. No extra apps. No tracking. Just free connections, powered by Brave.
706
How to stop running out of ephemeral ports and love long-lived connections
Often programmers have assumptions that turn out, to their surprise, to be invalid. From my experience this happens a lot. Every API, technology or system can be abused beyond its limits and break in a miserable way
707
eBPF – The Future of Networking and Security
Isovalent, the company behind Cilium, is announcing its $29M Series A financing round. Lets take a deeper look into where eBPF-based ...
708
Introduction to Linux interfaces for virtual networking (2018)
Explore common Linux virtual network interfaces, including Bridge, Bonded interface, VLAN, VXLAN, MACVLAN, IPVLAN, MACVTAP/IPVTAP, and more. Learn how to create and use them effectively for your
709
Rocket.chat leverages the Matrix protocol for interoperable communications
Learn more about how the leading open-source platform is furthering its efforts toward collaboration without compromise
710
International Space Station 437.800 MHz cross band FM repeater activated
At 01:02 GMT on September 2 a cross band FM amateur radio repeater with a downlink on 437.800 MHz was activated on the International Space Statio. The Amateur Radio on the International Space Stati…
711
How to drop 10M packets per second
Internally our DDoS mitigation team is sometimes called "the packet droppers". When other teams build exciting products to do smart things with the traffic that passed through our network, we take joy in discovering novel ways of discarding it.
712
Upcoming changes to Let's Encrypt and how they affect XMPP server operators
On 11th February, Let’s Encrypt will be rolling out a change to the certificates they issue to servers by default. Although there is generally nothing that Prosody operators need to do, servers using the new certificates may experience problems connecting to some other XMPP servers on the network.
713
Amazon, Verizon found using IPv4 240/4 addresses
In this article we use data from RIPE Atlas probes to investigate the usage of 240/4, a block of IPv4 addresses 'reserved for future use', formally known as Class E in the wild.
714
Matrix v1.15
Matrix, the open protocol for secure decentralised communications
715
Flipboard Begins to Federate
*This post was originally published by Mike McCue.
716
Everybody gets WebSockets
Two summers ago, with a seemed-big-at-the-time network of 28 datacenters, not long after introducing Medellin, CloudFlare introduced support for WebSockets, initially for our Enterprise customers.
717
DDoS Attacks: Best Practices for Prevention and Response
Late last month, Internet users across the eastern seaboard of the United States had trouble accessing popular websites, such as Reddit, Netflix, and the New York Times....
718
Tunnel via Cloudflare to any TCP service
Cloudflare's cloudflared tunnels are commonly used to 'publish' a web server that runs behind a firewall (e.g. making the webserver accessible from the…
719
Running BGP in large-scale data centers
What the research is: A first-of-its-kind study that details the scalable design, software implementation, and operations of Facebook’s data center routing design, based on Border Gateway Protocol …
720
No, SAR Can't See Through Buildings
Explore Capella blogs, case studies, and insights on SAR, space systems, and Earth intelligence.